MEDIUM
Source
CloudSploit
ID
opensearch-audit-logs-enabled

OpenSearch Audit Logs Enabled

Ensures that audit logs feature is enabled for OpenSearch domains.

Enabling audit logs feature allows to keep track of all user activity on Amazon OpenSearch domains (clusters), including failed login attempts, including authentication success and failures, index changes, and incoming search queries, enhancing security and compliance monitoring.

Modify Opensearch domain and enable audit logs.